popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1411 2024-08-08 15:33 picturegreatforeveryonetokissh...  

ab5e63bdc212cfe4832dcfaa5bcd47dd


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		1 2 7.6 M 3 ZeroCERT

1412 2024-08-08 14:42 66b274e0e1b95_shapr3D.exe  

a80b3beac20e2a5d805c51c36ba14a53


Generic Malware Malicious Library Malicious Packer UPX DllRegisterServer dll PE File PE64 OS Processor Check VirusTotal Malware crashed 		1.4 M 42 ZeroCERT

1413 2024-08-08 14:42 66b1f63c9578f_doz.exe  

07d615115d848b9b21d425e72116537e


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library .NET framework(MSIL) UPX ASPack Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		3 5 3 1 17.8 M 49 ZeroCERT

1414 2024-08-08 14:41 IEnetworks.hta  

948f32b531ba5004430eacb7a1eaa9e3


Generic Malware Downloader Antivirus AntiDebug AntiVM PowerShell MSOffice File PE File DLL PE32 .NET DLL VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		1 1 5 12.8 M 25 ZeroCERT

1415 2024-08-08 14:40 95.hta  

f85f36a24ed9678e95ba7e369261d581


Generic Malware Antivirus Downloader AntiDebug AntiVM PE File DLL PE32 .NET DLL VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder Tofsee Windows ComputerName DNS Cryptographic key 		1 1 5 11.4 M 18 ZeroCERT

1416 2024-08-08 14:40 66b1c36969eae_main.exe  

3d04dfed5185e2f62819f0951249e391


Client SW User Data Stealer LokiBot RedLine stealer ftp Client info stealer Malicious Library Antivirus .NET framework(MSIL) ASPack UPX Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 18.2 M 48 ZeroCERT

1417 2024-08-08 14:39 70.hta  

d25adfb8a78f72868ee40f379c1d9fe2


Generic Malware Downloader Antivirus AntiDebug AntiVM PowerShell MSOffice File PE File DLL PE32 .NET DLL VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		1 1 5 11.6 M 18 ZeroCERT

1418 2024-08-08 14:37 106.hta  

3c35707d9cacb409481600e0b5eed83a


Generic Malware Antivirus Downloader PE File DLL PE32 .NET DLL Malware download VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 5 10.6 M 21 ZeroCERT

1419 2024-08-08 14:37 wecreatednewentertainmenttound...  

0016aef348632b4114588b23be613073


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.6 M 32 ZeroCERT

1420 2024-08-08 14:28 hvilkes-receipt.vbs  

be57d52692dc2ef67f7c35290b424149


Generic Malware Antivirus powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 7.0 ZeroCERT

1421 2024-08-08 14:28 mygirlistotalchangeswithentire...  

c29dda8b224f54eeade764fdb7c6bb23


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic ICMP traffic exploit crash unpack itself Exploit DNS DDNS crashed 		1 3 6.8 35 ZeroCERT

1422 2024-08-08 14:26 like.exe  

f40919d4beadd501ea89202a719ab940


Malicious Library PE File PE64 Malware download Cobalt Strike Cobalt VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		2 2 2 3.8 61 ZeroCERT

1423 2024-08-08 14:26 picturegreatforeveryonetokissh...  

ab5e63bdc212cfe4832dcfaa5bcd47dd


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut ICMP traffic unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		1 2 8.4 3 ZeroCERT

1424 2024-08-08 14:26 hmay.txt.exe  

edfad175f97fe91185a1ed5beed5f468


PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName DNS DDNS 		2 2 5.4 52 ZeroCERT

1425 2024-08-08 14:24 sincesheiseverbuildnewthingent...  

f4b49bfacf066b76dd2f64aa5667e927


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic ICMP traffic exploit crash unpack itself Exploit DNS DDNS crashed 		1 4 6.8 35 ZeroCERT

keyword